Serverless computing is transforming the landscape of auditing by providing scalable, efficient, and cost-effective solutions for incident response. Traditional auditing methods often rely on static infrastructure, which can be slow and resource-intensive when responding to security breaches or anomalies. Serverless computing, however, enables real-time monitoring, automated alerts, and rapid response mechanisms without the need for dedicated server management. This paper explores the role of serverless computing in enhancing incident response in auditing, focusing on its ability to streamline forensic analysis, improve data integrity, and ensure compliance with regulatory standards. By leveraging cloud-based functions that execute only when needed, organizations can reduce operational costs while maintaining high availability and reliability in audit processes. Key benefits of serverless computing in auditing include automated log analysis, real-time anomaly detection using AI-driven algorithms, and seamless integration with existing audit tools. Additionally, serverless architectures enhance cybersecurity by allowing dynamic scaling during potential security incidents, ensuring swift mitigation and response. Despite its advantages, challenges such as vendor lock-in, latency concerns, and security vulnerabilities must be addressed to maximize its potential in auditing environments. This study highlights best practices for implementing serverless computing in audit workflows, ensuring an adaptive and resilient approach to incident response. By embracing serverless computing, auditors can revolutionize their approach to risk management, enabling more agile, data-driven, and efficient incident response mechanisms.

itation: Ganapathy, V. (2025b). Serverless computing for incident response in auditing. Shodh Sari-An International Multidisciplinary Journal, 04(02), 129–154. https://doi.org/10.59231/sari7814